This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft File: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json) Hash identifier: IqD8P723sG7DaXKswGj1dhUbGyRcvE7CSbZU3CD867U= Subject key identifier: 54:98:85:60:C5:D2:74:83:DA:FD:72:9D:9D:A2:E2:22:1D:77:45:C0 Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A Certificate issuer: /CN=29da6411a13264dc6de0f101108540ef741ed19a Certificate serial: 019C42EB0DD9B40E00979260B22991F40FA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft Manifest number: 142D Signing time: Mon 09 Feb 2026 15:00:26 +0000 Manifest this update: Mon 09 Feb 2026 15:00:26 +0000 Manifest next update: Tue 10 Feb 2026 15:00:26 +0000 Files and hashes: 1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: snGxAwiZivDmMLKBCqTM6CIBmZY122IY8ZwassmMecE=) 2: VYFRuXlvwBdryFQTt5OTENfApaY.roa (hash: rnOyzeUtaX8vu4gXdx5Hk1vLfU4MWIMFx4e4U3jLOpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:0d:d9:b4:0e:00:97:92:60:b2:29:91:f4:0f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a Validity Not Before: Feb 9 15:00:26 2026 GMT Not After : Feb 10 15:00:26 2026 GMT Subject: CN=54988560c5d27483dafd729d9da2e2221d7745c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:50:00:43:a3:54:3f:b3:47:b9:25:8b:48: 59:4e:46:f4:88:f1:ac:73:a8:15:25:26:db:e0:b1: 40:6d:e9:64:f2:84:7a:a5:b7:ac:a4:69:96:85:0a: 9a:0e:90:2f:3c:55:51:56:b9:0d:ea:c1:41:1d:d0: 5c:be:ff:17:f3:78:32:dd:c8:65:c1:9b:a8:0b:68: 2a:59:8d:24:9c:d1:f7:a3:7d:85:8d:d5:84:48:32: e1:46:b0:3f:73:82:ee:94:84:e6:6a:b8:35:4e:a5: 3b:70:1c:26:3c:32:59:10:5e:bd:ff:4d:39:c7:9f: 66:e4:eb:21:fe:2c:3f:80:e6:be:85:45:ae:fa:6f: fd:b8:d2:41:23:74:91:70:8e:b0:7c:7c:98:ef:be: 0a:86:5a:28:32:f9:17:cb:e9:70:32:c8:74:8b:75: 17:59:45:cb:0f:c2:87:d9:fc:8c:3e:97:04:dc:c8: a6:e6:7a:f6:e7:c7:72:26:52:b3:38:27:a0:b9:45: 89:5b:16:d6:c0:a0:2b:36:3a:c1:8d:21:d3:c3:46: 06:a6:c8:26:2f:b8:c8:43:a6:31:3a:82:2a:7d:6c: 9d:2d:25:a9:b2:67:eb:4f:7a:a5:45:7c:1e:56:00: 17:ac:95:32:3d:4a:f5:23:52:30:f5:8d:10:8b:37: 9b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:98:85:60:C5:D2:74:83:DA:FD:72:9D:9D:A2:E2:22:1D:77:45:C0 X509v3 Authority Key Identifier: keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bb:e7:a8:99:6c:f0:a2:6e:c0:24:c9:7d:85:70:8c:29:2b: 0d:5a:43:0b:d7:b0:a8:80:c3:2a:c3:c0:1d:2d:e8:0d:29:57: 03:8f:ec:a8:af:67:a4:8f:44:93:46:4e:7f:31:66:7c:69:5c: 82:e8:83:f3:7e:f5:32:4c:1d:31:a5:14:07:42:02:87:29:f9: b7:93:2a:f5:de:c0:fa:e7:26:ab:44:b7:02:c5:ab:9d:e1:bc: d0:77:fe:25:cf:f7:45:ea:14:b8:fe:a2:b1:76:51:2b:14:ae: d4:94:b0:21:26:65:0d:f9:21:68:92:63:7d:f3:c9:05:93:00: 38:17:0b:2c:0d:4d:ea:cb:4e:ad:11:06:f9:ff:51:28:ca:62: d9:14:f2:cd:58:16:1a:b4:8f:29:0e:fa:94:80:72:79:45:fe: 3d:14:55:cc:ac:16:a9:78:cd:9f:7e:7f:8b:b2:dc:f1:83:27: 48:af:68:e7:d7:f0:36:05:4b:b7:7f:7c:b6:5e:0c:df:bc:e9: ce:3c:c3:92:92:16:3a:3e:8f:aa:b4:e2:94:20:f4:b6:be:71: 57:1b:59:07:cb:43:9e:2f:92:f3:73:6b:4c:16:79:c6:5e:f6: 50:c3:6d:84:c9:34:d5:29:35:75:6a:57:31:0a:d5:03:dc:72: 22:d6:06:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6w3ZtA4Al5JgsimR9A+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZGE2NDExYTEzMjY0ZGM2ZGUwZjEwMTEwODU0MGVmNzQx ZWQxOWEwHhcNMjYwMjA5MTUwMDI2WhcNMjYwMjEwMTUwMDI2WjAzMTEwLwYDVQQD Eyg1NDk4ODU2MGM1ZDI3NDgzZGFmZDcyOWQ5ZGEyZTIyMjFkNzc0NWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFVQAEOjVD+zR7kli0hZTkb0iPGs c6gVJSbb4LFAbelk8oR6pbespGmWhQqaDpAvPFVRVrkN6sFBHdBcvv8X83gy3chl wZuoC2gqWY0knNH3o32FjdWESDLhRrA/c4LulITmarg1TqU7cBwmPDJZEF69/005 x59m5Osh/iw/gOa+hUWu+m/9uNJBI3SRcI6wfHyY774KhlooMvkXy+lwMsh0i3UX WUXLD8KH2fyMPpcE3Mim5nr258dyJlKzOCeguUWJWxbWwKArNjrBjSHTw0YGpsgm L7jIQ6YxOoIqfWydLSWpsmfrT3qlRXweVgAXrJUyPUr1I1Iw9Y0Qizeb/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSYhWDF0nSD2v1ynZ2i4iIdd0XAMB8GA1UdIwQY MBaAFCnaZBGhMmTcbeDxARCFQO90HtGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNTZjMTItZGI3YS00MjIwLTliMTUt MWMyYjg0MmQyMmJlLzEvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hNTZjMTItZGI3YS00MjIwLTliMTUtMWMyYjg0MmQyMmJl LzEvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrvnqJls 8KJuwCTJfYVwjCkrDVpDC9ewqIDDKsPAHS3oDSlXA4/sqK9npI9Ek0ZOfzFmfGlc guiD8371MkwdMaUUB0IChyn5t5Mq9d7A+ucmq0S3AsWrneG80Hf+Jc/3ReoUuP6i sXZRKxSu1JSwISZlDfkhaJJjffPJBZMAOBcLLA1N6stOrREG+f9RKMpi2RTyzVgW GrSPKQ76lIByeUX+PRRVzKwWqXjNn35/i7Lc8YMnSK9o59fwNgVLt398tl4M37zp zjzDkpIWOj6PqrTilCD0tr5xVxtZB8tDni+S83NrTBZ5xl72UMNthMk01Sk1dWpX MQrVA9xyItYGRA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:59 2026 by rpki-client